01Scope
This policy applies to the Alias Draw website, real-time multiplayer game, optional accounts, saved word packs, moderation reports, and related support. It does not govern websites or services that may be linked from Alias Draw and have their own privacy practices.
02Information we collect
Display name, room code, reconnect token, player role, game settings, guesses, chat messages, scores, readiness, drawing actions, and other live room events. Active room and canvas state are kept in server memory.
Username, password hash, account identifier, creation date, and authentication session records. Alias Draw stores a one-way scrypt password hash, not your readable password.
Saved-pack name, public seven-character pack code, word and alias groups, word count, owner account, and creation or update times.
Games played, wins, correct guesses, points, best streak, fastest guess, languages played, and the last statistics update.
Daily totals for page visits, new or returning browsers, how-to, teacher-guide, language-guide, and Saily information-page visits and button clicks, including which Alias Draw placement led to a Saily visit or click, rooms created, invites copied or shared, Discord-ready game-night posts copied, invite links opened, unavailable invite links, invite join attempts and completed joins, second players joining, games, practice sessions, and daily challenges started or completed, and result cards shared or downloaded. These counters do not include names, room codes, account identifiers, IP addresses, drawings, guesses, or message content.
Reported aliases, report reason, related saved-pack code when applicable, reporter account when signed in, and report time.
IP address, request time, browser or device information, network events, error details, and security or performance logs may be processed by Alias Draw and its hosting, database, DNS, and security providers.
Email address and any information you choose to include when contacting support.
We do not ask for your legal name, postal address, phone number, precise location, contacts, camera, or microphone. Browser speech playback and game sounds run through browser features and do not send microphone recordings to Alias Draw.
03How information is used
- Run real-time rooms, drawing, guessing, scoring, chat, reconnection, and host controls.
- Create and authenticate optional accounts.
- Save packs, statistics, preferences, and moderation history.
- Prevent abuse, enforce limits, investigate safety issues, and protect the service.
- Debug failures, measure reliability, maintain infrastructure, understand the game funnel, and improve features.
- Respond to support, privacy, and legal requests.
- Comply with law and establish, exercise, or defend legal claims.
Alias Draw does not use personal information for third-party behavioral advertising, does not sell personal information, and does not currently run advertising or third-party analytics trackers. Product-use measurement is kept as first-party daily aggregate counts.
04Legal bases
Where a legal basis is required, processing necessary to provide requested gameplay and account features is based on performance of our agreement with you. Security, moderation, service improvement, and basic operational logging are based on our legitimate interests in operating a safe and reliable service. Legal compliance is based on applicable legal obligations. If we request consent for a future optional use, you may withdraw it without affecting earlier lawful processing.
06Public and room-visible information
Room codes are intended to be shared with invited participants, but anyone who obtains a valid code may try to join. Display names, guesses, chat, drawings, and scores are visible to people in that room. Do not use a real name or share sensitive personal information in a display name, drawing, guess, chat message, or word pack.
Saved-pack codes are public-by-code. Anyone with a code may load the corresponding pack and see the owner username and pack content. Choose a non-identifying username and do not place private information in a pack.
07Cookies and browser storage
Signed-in accounts use a secure HTTP-only authentication cookie that is not available to page scripts. The cookie is used only to keep you signed in and normally expires after 30 days. Alias Draw does not use advertising cookies.
Your browser may store your display name, room reconnect information, host settings, local gameplay statistics, daily-challenge completion day and streak, brush color, brush size, opacity, smoothing choice, sound choice, and a first-visit time. The first-visit time is used only to count that browser as new or returning without sending a persistent browser identifier. This local storage remains on that browser until Alias Draw removes a temporary value or you clear site data. Clearing it may remove preferences, the daily streak, local statistics, or the ability to reconnect to a room.
08Retention
- Active room, drawing, guess, and chat state remains in memory until the room closes, expires, or the server restarts or deploys.
- Authentication cookies are normally valid for 30 days. Expired server session records are removed during routine cleanup.
- Account data, saved packs, and synced statistics remain until the account or pack is deleted, unless longer retention is required for security, legal, or integrity reasons.
- Daily aggregate use counts may be retained for long-term trend comparison because they are not linked to a person, account, room, or persistent browser identifier.
- Deleting an account removes its login, sessions, statistics, and owned packs. A submitted moderation report may remain with the reporter identity removed so pack safety history is not erased.
- Operational and security logs are kept according to provider settings and for only as long as reasonably necessary for reliability, security, abuse investigation, and legal obligations.
- Support messages are kept as long as needed to resolve the request and maintain an appropriate record.
09Security
We use measures designed to protect information, including encrypted HTTPS connections, one-way scrypt password hashing, HTTP-only same-site session cookies, private database networking, service-restricted secrets, rate limits, input limits, and access controls. No internet service can guarantee absolute security. Use a unique password and promptly contact us if you believe an account or room has been compromised.
10Your choices and rights
You can play as a guest, sign out, delete saved packs, or delete your account from the account panel. You may also contact us to request access, correction, deletion, restriction, objection, or a portable copy where applicable. You may complain to the privacy regulator in your jurisdiction.
We may ask for information reasonably needed to verify identity and protect another person’s data. Some requests may be limited by law, security needs, or the rights of others. Authorized agents should identify the person represented and provide proof of authority.
11Regional notices
European Economic Area, United Kingdom, and Switzerland
Depending on location and applicability, you may have rights to information, access, correction, erasure, restriction, portability, objection, withdrawal of consent, and a complaint to a supervisory authority. Alias Draw does not make decisions based solely on automated processing that produce legal or similarly significant effects.
California and similar U.S. state laws
Where applicable, you may request the categories and specific pieces of personal information collected, correction, deletion, and information about disclosures. You may have a right to opt out of sale, sharing for cross-context behavioral advertising, or targeted advertising. Alias Draw does not currently sell personal information or share it for cross-context behavioral advertising, so no opt-out mechanism is required for those practices at this time. We will not discriminate against you for exercising an applicable privacy right.
Browser “Do Not Track” signals are not standardized. Because Alias Draw does not run behavioral advertising trackers, it does not alter service behavior in response to those signals.
12Children’s privacy
Alias Draw is a general-audience service and is not directed to children under 13. A child under 13 must not independently create an account or submit personal information. If you believe a child under 13 provided personal information without legally sufficient authorization, contact us so we can investigate and delete it as appropriate.
Teachers, schools, parents, and guardians using Alias Draw with students are responsible for obtaining any required permissions, selecting age-appropriate settings, using non-identifying display names, supervising rooms, and complying with applicable student and children’s privacy rules. This policy does not replace a school’s own notice or consent obligations.
13International processing
Alias Draw is hosted in the United States, including infrastructure in the U.S. Central region. If you access the service from another country, information may be processed in the United States or other locations where service providers operate. Where required, transfers are handled using recognized legal mechanisms and provider safeguards.
14Changes to this policy
We may update this policy as the service, providers, or law changes. The current version will remain posted here with a revised effective date. If a change materially affects how existing personal information is used, we will provide additional notice when reasonably required.
15Contact
For privacy questions or requests, email Support@sailyapp.com. Use the subject “Alias Draw Privacy Request” and describe the right you want to exercise. Do not send your password.